Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
File:                     uZDIXPoM7VKDY0mX56SqjOeDbbY.mft (raw, json)
Hash identifier:          GaTTJ/WWQl0psCV8xAtO7CFGnTgCYVkFUiIWKX9JubU=
Subject key identifier:   0C:0F:0B:B6:EC:A0:83:F0:B3:52:C4:34:A4:87:80:73:C6:18:A2:8B
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Certificate issuer:       /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial:       0194BB96EB76A8E189DE232CAF5B4A3B5EE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 09:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:17 +0000
Files and hashes:         1: fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa (hash: Hb04qv2mCfUH3swl1KX6h239vXc62PCAwsB9N2VdCD0=)
                          2: uZDIXPoM7VKDY0mX56SqjOeDbbY.crl (hash: LUQVS4jINXNEj2iY57siibNAuGe+ceTphLcg335CYpA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:eb:76:a8:e1:89:de:23:2c:af:5b:4a:3b:5e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
        Validity
            Not Before: Jan 31 09:00:17 2025 GMT
            Not After : Feb  1 09:00:17 2025 GMT
        Subject: CN=0c0f0bb6eca083f0b352c434a4878073c618a28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:6a:48:72:d6:d6:d9:57:a1:e7:a6:bf:4a:
                    59:5a:ba:49:fb:c7:9a:3a:b1:9f:a4:0a:73:bf:2f:
                    6f:1e:d3:cf:ae:6a:fb:d7:65:d6:5a:bd:b5:2c:0f:
                    9b:91:97:5a:f7:13:59:40:ad:8c:b5:3a:9f:0c:73:
                    10:3c:96:0b:00:39:9e:51:08:b4:8f:ae:18:ce:c2:
                    b4:45:f4:c8:0b:cc:09:fe:c4:c8:d0:32:ca:0b:c5:
                    dd:a2:3c:b0:50:bc:f8:0a:e3:41:84:09:3e:90:27:
                    60:94:63:36:3f:a9:89:7e:03:59:b1:16:65:2f:f1:
                    2a:09:ac:18:99:a1:f4:73:7c:77:f9:a9:04:ae:a2:
                    b3:50:aa:4b:b2:fc:71:a5:d8:35:07:e9:2e:7a:9f:
                    0c:75:44:59:83:c1:c5:7e:26:d3:06:03:84:86:61:
                    5f:e3:15:52:1f:cd:89:0b:a5:82:b5:ea:78:85:b2:
                    25:9e:a7:58:00:63:be:47:3e:f4:21:d8:6c:10:c3:
                    e3:ae:d4:bf:ff:53:34:6b:e5:02:d5:2b:1c:07:16:
                    8c:c5:aa:12:be:65:14:e1:a1:86:02:e2:fb:0f:36:
                    71:97:05:f0:e5:52:d8:3d:ff:0c:da:19:38:73:97:
                    a4:ce:6e:64:e6:49:4f:35:95:a7:9f:bf:14:2b:7c:
                    0d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0F:0B:B6:EC:A0:83:F0:B3:52:C4:34:A4:87:80:73:C6:18:A2:8B
            X509v3 Authority Key Identifier:
                keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3c:f5:ec:bb:cc:49:d6:5c:43:28:6d:5d:76:20:38:a2:f0:
         49:e1:ff:77:76:7b:c2:f2:56:8e:3d:99:fd:6e:d3:31:85:e7:
         a2:65:80:36:08:35:a1:c5:4c:99:4b:60:e3:26:eb:72:e0:91:
         0a:36:98:5c:85:3c:73:0e:69:1f:82:7a:0d:47:ad:3e:be:86:
         4e:b2:7e:bf:0c:e1:3b:5b:03:a7:c4:0d:e6:7e:ef:25:c2:02:
         e2:0d:a2:33:2c:d8:27:75:61:94:b6:06:a0:a0:ea:02:5c:f8:
         2f:d5:10:01:86:9e:e8:d5:ef:2b:4c:2b:3f:66:03:cf:3c:6d:
         c9:7f:fe:cd:67:4e:46:23:d1:00:c6:53:96:08:93:42:e5:91:
         e2:7a:9a:1e:37:4c:61:90:e9:57:58:8b:d1:77:9d:b5:8c:76:
         dc:ef:f2:3a:54:c6:fc:60:2d:7f:e4:11:03:8d:85:87:fc:43:
         be:88:ce:28:e1:e1:7b:26:3b:f7:d2:9f:bd:28:45:dc:5d:e6:
         50:b2:1c:46:15:bf:1a:84:7f:a8:1f:14:fd:28:e8:1d:64:c7:
         ec:a8:c8:68:84:34:1c:a3:de:21:5a:3d:b2:1b:46:5b:41:11:
         98:0a:97:43:53:b2:33:12:b7:0d:9d:99:fa:0d:4d:5a:fa:fa:
         d9:cc:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:42 2025 by rpki-client on console-fra.rpki-client.org